General
- Target 2026-04-16_0156c85a88c2a9061df948d524f367b9_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- Sample260416-rf6dcacy2t
- SHA256 96b3351a9a7e2707282dd13c28b4d1fac9157d226a733aaddcb4990e8e821a5a
- MD5 0156c85a88c2a9061df948d524f367b9
- SHA1 df1d1cf1eb81703be0bcd49cdc90d6e417a6f32a
- SHA512 e5cd5a5a3dac5167d1facc07f19bfd35e19cb0cf58ef30d9db1b39757e5967ed66151a0a522458d84ac7aa04f1b8460121ddf754f64c11958254d3b26850c0af
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpZ:MtpUgTH2M2m9UMpu1QfLczqssnKSH
- TLSH T1DB56B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
2026-04-16_0156c85a88c2a9061df948d524f367b9_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win10v2004-20260130-en
7 signatures
150 seconds
Behavioral task
behavioral2
Sample
2026-04-16_0156c85a88c2a9061df948d524f367b9_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njra.exe
Resource
win11-20260130-en
7 signatures
150 seconds
Malware Config
Targets
-
- Target 2026-04-16_0156c85a88c2a9061df948d524f367b9_akira_cobalt-strike_elex_hijackloader_icedid_ipamor_njrat_remcos_rhadamanthys_vidar
- Size 5.7MB
- SHA256 96b3351a9a7e2707282dd13c28b4d1fac9157d226a733aaddcb4990e8e821a5a
- MD5 0156c85a88c2a9061df948d524f367b9
- SHA1 df1d1cf1eb81703be0bcd49cdc90d6e417a6f32a
- SHA512 e5cd5a5a3dac5167d1facc07f19bfd35e19cb0cf58ef30d9db1b39757e5967ed66151a0a522458d84ac7aa04f1b8460121ddf754f64c11958254d3b26850c0af
- SSDEEP 49152:MtpU8ggw1g+1CART5eBiyKS3EI3wybn20DCYIHvc8ixuZm9+fWsw6dTPBq/UybpZ:MtpUgTH2M2m9UMpu1QfLczqssnKSH
- TLSH T1DB56B31125DA9FDCC05FA474CE0669B16A237C868F61AFDF19807E293E756B06E3810F
- MD5 SHA1 SHA512 SSDEEP TLSH
Score9/10-
Detects executables packed with ASPack
-
Executes dropped EXE
-
Adds Run key to start application